# Creating processor \[set\_security\_user\] (tag \[null\]) on field \[\_security\] but authentication is not currently enabled **URL:** \ **Category:** SIEM\ **Tags:** elastic-stack-security\ **Created:** [June 8, 2022, 2:05pm UTC](https://discuss.elastic.co/t/creating-processor-set-security-user-tag-null-on-field-security-but-authentication-is-not-currently-enabled/306706 "2022-06-08T14:05:00Z")\ **Posts on this page:** 1\ **Showing post:** 3
**Author:** ![K\_st\_rs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/k_st_rs/32/106788_2.png) [@K\_st\_rs](https://discuss.elastic.co/u/K_st_rs)\ **Post date:** [June 18, 2022, 2:19pm UTC](https://discuss.elastic.co/t/creating-processor-set-security-user-tag-null-on-field-security-but-authentication-is-not-currently-enabled/306706/3 "2022-06-18T14:19:50Z")
The documentation is largely not working for me as far as I can see: run the [`elasticsearch-reset-password`](https://www.elastic.co/guide/en/elasticsearch/reference/8.2/reset-password.html) tool. OK I can get a password, but what do I do then? ```auto bin/elasticsearch-create-enrollment-token -s kibana --url "https://127.0.0.1:9200" ERROR: [xpack.security.enrollment.enabled] must be set to `true` to create an enrollment token ``` Do I enter this in elasticsearch.yml ```auto bin/elasticsearch-create-enrollment-token -s kibana --url "https://127.0.0.1:9200" ERROR: Failed to determine the health of the cluster. ``` Do I try the other thing suggested on ```auto bin/elasticsearch-create-enrollment-token -s node Unable to create enrollment token for scope [node] ERROR: Unable to create an enrollment token. Elasticsearch node HTTP layer SSL configuration is not configured with a keystore ``` ```auto bin/elasticsearch-create-enrollment-token -s kibana Unable to create enrollment token for scope [kibana] ``` then it claims somewhere I have a cert directory in /etc/elasticsearch I don't have that directory. Do I generate ca or http > **[elasticsearch-certutil | Elasticsearch Guide \[8.2\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/8.2/certutil.html)** and put it in /etc/elasticsearch/certs nothing changes besides that to get a working system now I have to set ```auto xpack.security.enabled: false xpack.security.enrollment.enabled: false xpack.security.http.ssl.enabled: false ``` to get back to where I started. I am on Ubuntu 20.04 LTS and I think I installed this via apt. As I newbie, you give me some choices, I don't understand the difference. Do you have some form of tldr like certbot? > **[Certbot](https://certbot.eff.org/)** > > Tagline These days there are 100s of programs, security updates, mails, tweets etc etc. The whole attraction of a ready made system is to save time. Otherwise one can program it one self. Most videos etc is for \< 8.2 and one spends already a considerable amount of time chasing the changes. Security that is complicated to install is by default insecure. I also checked out this thread > [@Unable to create an enrollment token for Kibana. "Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate"](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token-for-kibana-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificate/297032): > > Hello, I tried today to setup my ELK stack securely so I followed the documentation and created all certs that I need using the certutil and encrypted the CA and the node cert with passwords. I placed the http.p12 file to /etc/Elasticsearch/certs/ Elasticsearch. Then I updated the keystone as told in the README: elasticsearch-keystore add "xpack.security.http.ssl.keystore.secure\_password" and typed my node's p12 password here. Now I wanted to add Kibana from another server so I tried to … --- _[View the full topic](https://discuss.elastic.co/t/creating-processor-set-security-user-tag-null-on-field-security-but-authentication-is-not-currently-enabled/306706)._